{"id":"CVE-2026-5435","title":"Potential buffer overflow in ns_sprintrrf TSIG handling path","summary":"The deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvssSource":"adp","cwe":["CWE-787"],"vendor":"The GNU C Library","product":"glibc","affected":["glibc >= 2.2 <= *"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-04-28T15:15:07.411547Z"},"published":"2026-04-28","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:12:12.018Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-5435","references":[{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34033"},{"url":"https://inbox.sourceware.org/libc-announce/7a655d55-276f-41fe-b550-feb3ebb2ce91@redhat.com/T/#u"}],"tags":["cve.org"],"epss":0.00394,"epssPercentile":0.3192,"ingestedAt":"2026-10-15T05:52:46.049Z","slug":"CVE-2026-5435","body":"## Overview\n\nThe deprecated functions ns_printrrf, ns_printrr and fp_nquery in the GNU C Library version 2.2 and newer fail to enforce the caller-supplied buffer length, and can result in an out-of-bounds write when printing TSIG records.\n\n## Affected\n\n- `glibc >= 2.2 <= *`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}